Privacy policy

The short version

When building my site, I chose not to use cookies, tracking, analytics, or ads. Additionally, I made sure everything the site loads (the code, the fonts, the icons, all of it) comes from the site itself, and that nothing is loaded from outside services. This way, the only company involved is the one that hosts the site, which no website can avoid. In this case, the site is hosted on GitHub, which logs visitors' IP addresses for security purposes, as stated in their own documentation. The only personal data I ever collect is your email address, and only if you choose to sign up for the newsletter. Everything below explains this in more detail.

Where this site lives

This site is hosted on GitHub Pages. That means when you visit, GitHub's servers do the actual work of sending the pages to your browser, and like any web host, GitHub can log basic technical information to keep things running and secure, including IP addresses. This happens for every website on the internet: a server can't send a page to your browser without knowing where to send it. I don't have access to those server logs myself, that's GitHub's side of things, used for security and to keep the service working. If you want the details on what they collect, GitHub's privacy statement covers it.

The newsletter

If you sign up for the newsletter, I collect one thing: your email address. That's it. I use it for exactly one purpose: sending you the newsletter. Nothing else, and I'll never sell it or hand it to anyone for advertising. The legal basis for this is your consent: you give it by entering your email and subscribing. You can take it back whenever you like.

The emails are sent through Buttondown, an email service that handles the sending and stores the subscriber list on my behalf. Buttondown is based in the US, so your email address is stored there. That transfer is covered by Standard Contractual Clauses (the standard legal mechanism for sending data outside the EU), and Buttondown only ever processes your email to provide the service, they don't collect anything beyond what you give them. You can read Buttondown's privacy policy and data processing agreement if you want the full picture.

You can unsubscribe at any time using the link at the bottom of every email. You can also ask for a copy of your data or ask me to delete it entirely, and that gets handled right away too. I keep your email on the list until you unsubscribe or ask me to remove it, and no longer. And if you ever feel I've mishandled your data, you have the right to complain to your data protection authority. In Portugal, that's the CNPD (Comissão Nacional de Proteção de Dados).

Questions?

Email me at hi@eusarapinto.com Copied!